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Abstract 

We determine the conditions under which singular vahies of multiple ry-quotients 
of square-free level, not necessarily prime to 6, yield class invariants, that is, algebraic 
numbers in ring class fields of imaginary-quadratic number fields. We show that the 
singular values lie in subfields of the ring class fields of index 2'° ~^ when k' ^ 2 
primes dividing the level are ramified in the imaginary-quadratic field, which leads 
to faster computations of elliptic curves with prescribed complex multiplication. The 
result is generalised to singular values of modular functions on Xq{p) for p prime 
and ramified. 
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Let K = Q(vA) be an imaginary-quadratic number field of discriminant A, and 
let O^) be the order of discriminant D = c^A and conductor c in K. For a modular 
function / and an argument t £ K <^ C with 9r > we call the singular value /(t) a 
class invariant if it lies in the ring class field 0,c, the abelian extension of K with Galois 
group isomorphic to CI{Od)', we denote the isomorphism by a : CI{Od) Gal{i^c/ K). 
In this article, we are interested in class invariants derived from multiple ry-quotients, 
and we examine in particular cases where those generate a subfield of the ring class field. 

In §1 we define the multiple ry-quotients under consideration and collect their proper- 
ties, in particular their transformation behaviour under unimodular matrices. We then 
proceed in §2 to determine conditions under which their singular values lie in the ring 
class field and show how to compute their characteristic polynomials with respect to the 
number field extension fic/K using roots of an n-system, suitably normalised quadratic 
forms of discriminant D representing the class group. The results of §3 are at the heart 
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of this article: We show that if some or ah of the primes dividing the level of the mul- 
tiple r/-quotient are ramified in K, then the singular values lie in fact in a subfield L 
of of index a power of 2; more precisely, the Galois group of 0,c/L is elementary 
abelian, so that J7c is a compositum of linearly disjoint quadratic extensions of L. An 
alternative proof for the special case that all primes are ramified leads to an interesting 
generalisation in §4, namely to functions of prime level invariant under the Pricke-Atkin— 
Lehner involution. We conclude by some class field theoretic remarks in §5, showing how 
this computationally less expensive construction of subfields of ftc ™£^y be completed to 
obtain the full ring class field. 



1 Multiple 7^-quotients 

In this section, we define multiple ry-quotients and collect their basic properties, most of 
which are either well-known or readily verified. 

Let r] be Dedekind's function, and consider positive integers pi, ■ ■ ■ ,Pk', in later sec- 
tions, they will be distinct primes, but this restriction is not needed for the time being. 

The simple r)- quotient of level pi is defined by 

'H 



r]{z) 



and the double rj- quotient of level piP2 by 



The process may be continued inductively by letting 

_ tOp,.....p,{z) 

"^Pl,---,Pfc+l ~ / \ ' V"Jj 

tt), 



■'Pl,--;Pk 



Pk + 1 



SO that tVpj is a quotient of transformed r/- functions with 2^ factors in the numerator 

and as many in the denominator. 

Let Tn denote the set of modular functions of level n whose g-expansions have 
coefficients in Q(Cri)- The powers of the multiple j^-quoticnts are elements of for 
some n, which can be determined from the transformation behaviour of rj under uni- 
modular substitutions. Here and in the following, we consider unimodular matrices 

M = ( " M G r = Sl2(Z)/{±l}, normalised such that c ^ 0, and d > if c = 0. 



c d. 

We denote by •' the odd part and by A(-) the 2-adic valuation of a number, so that 
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c = c'2^(^); by convention, A(0) = 0' = 1. Let 

e(M) = ab + c{d{l - a'^) - a) + 3c {a - 1) 
e(M) = e{M) + ^X{c){a'-l) 

e{M) = [^yr 

with C24 = e2'^*/24_ Notice that e(M) - e(M) is divisible by 12, since a and c cannot be 
even simultaneously. By [SchlOl Th. 1.10.1], 

r/(Mz) = e{M)yJcz + dr]{z). 

So for M G rO(Ar) with 6 = Nh^ we have, cf. [E505l Th. 3], 

»„(M-) ^ ^»).(: (4) 

where \{Nc) — A(c) equals for c = 0, and A(A^) otherwise. With s = ^f.A{2iN-i) ^'^'^ 
e I s, we have tt)^ G J"|Ar by |EMn9[ Th. 6]. 

For the double r/-quotients VOp^^p^ of level N = piP2 and M £ T^{N) with b = Nb^ 
we compute 

_ -(pi-l)(p2-l)(a6o+c(d{l-a2)-a))-3(p'i-l)(p'2-l)c'{a-l) 

Let s = ged(24,(p'-i)(p2-i)) ^ I ^- 'L'^^" "'pi.pa e -^fTV, cf. [E505I Th. 7] and ©. 
For r/-quotients of order k ^ 2, where N = pi ■ ■ ■ p/^, the formula generalises as 

tT3pi,...,p,(Mz) = 

(p,_l)...(p^__l)(afeo + (-l)'=c(d(l-a2)-a))-3{-l)'=(p'i-l)-(p',-l)c'(a-l) (6) 

If s = . — — 7 TvT and e I s, then rof:, „. G -T^^at. 

gcd(24,(pi-l)---(pfc-l)) I ' Pi,---,Pk 

For later reference, we also recall the transformation behaviour of 72 = \/J and 
73 = Vi - 1728, see [SchlOl §2.4.3]: 

72(Mz) = C3"^^*^'^2(^),73(Mz) = (-1)-W73(z), (7273)(Mz) = Cf'\^2l3)iz). (7) 
Since r] has a rational g-expansion, so does rDp^^....pj.. For = ( *j* )) have 



rj (^) = £{S)y/N^7]{Nz) by [EHoHl Th. 3], so that 
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tON{Sz) = VN 



rj{Nz 
r]{z] 



I = VNkin{Nz)-^ 
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has a rational g-expansion up to a factor ^/N . For k ^ 2 and N = pi ■ ■ ■ pf^, this implies 
tt'pi,...,p(.(5'z) = mp-i^^,„^pi^{Nz)^~^^ , which has a rational g-expansion. 

Denote by Iat the Fricke-Atkin-Lehner involution associated to r'^(A^), so that f\iy{z) = 
f (-j^) • The previous equation can be rewritten as 

rOp,,...,p,\N{z) = tt)pi,...,p,,(z)(-^)'; (8) 
in particular, tt)pj^...^pj. is invariant under the involution for even k. 

2 Singular values of multiple 77-quotients 
2.1 Class invariants 

A very general result on class invariants is obtained in [Sch021 Th. 4]: Let / be modular 
for r'^(A^) such that / and f o S have rational g-expansions. Assume that there are A 
and B such that a = AZ+ ~-^+^^ Z is a proper ideal of Od, | ^^j^ and A^ is coprime 

to the conductor c. Let r = ~^2A~^ basis quotient of a with 9r > 0. Then 

/(r) G Oc- We use this theorem to determine when singular values of powers of multiple 
r/-quotients are class invariants. 

Theorem 1 Let pi < p2 be primes and e an integer such that one of the following 
conditions is satisfied: 

1) {pi,P2}n{2,3} =0 

e{pi — l){p2 — 1) = (mod 3) or 3 f D, and 
e{pi - l) (p2 - 1) = (mod 8) or 2 \ D. 

2) Pi = 3, P2 ^ 5 

e{p2 — 1) = (mod 3), and 
e(p2 - 1) = (mod 4) or 2 \ D. 

3) pi = 2 

e{p2 - 1) = (mod 24). 

Let pi, p2 be non-inert in K and not dividing the conductor c, and let r = ~^2A^ 
such that pip2 I C = ■ Then ^p^^p^iT) ^ ^c- 

Proof: The result is well-known in the case e{pi — l)(p2 — 1) = (mod 24), cf. i iES041 
Th. 3.2], since then ^p^^p^ is modular for T^{piP2)- In all other cases, pi and p2 are odd, 
and dS]) becomes 

tt)pi,p2(Mz) = Ce tt)pi,p2(z). (9) 

Consider first the case that pi,P2 7^ 3, and let h = (7273) * ^pi,p2- From ([7|), ([9]) 
and the fact that at least one of pi — 1, p2 — 1 and l—piP2 is divisible by 3, we deduce that h 
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is modular for r°(pip2), cf. |SchlOl §2.4.3], so that /i(r) G n^. Since 72(t) G Jl^ for 3 f D 
and 73 (r) G fi^ for 2 f by |Schn2[ Th. 2 and 3], andj(T) = 72 (r)^ = 73(t)2 + 1728 G 

(Pl-l)(P2-i-) 

we have (7273)'^ " (t) G ^Ic under the assumptions of the theorem, which proves 
the result. 

If pi = 3, the function is modular for T^{piP2) under the conditions of the theorem, 
and we conclude analogously. □ 

Similar results hold for higher order r/-quotients; in fact, adding odd primes makes 
it easier to satisfy the restrictions modulo 8. 

Theorem 2 For k ^ 3, let e be an integer and pi, . . . ,pk distinct primes such that one 
of the following conditions is satisfied: 

1) e(pi-l)---(pfc-l) = (mod 24). 

2) All Pi are odd and congruent to —1 modulo 3, and 'i\D. 

Let Pi, ■ ■ ■ ,Pk be non-inert in K and not dividing the conductor c, and let t = ~^2A^ 
be such that N = pi ■ ■ ■ pk \ C = ^-^x^ ■ Then tt'p^_,,,,pj.(T) G ilc- 



Proof: The first case is trivial. In the second case, we use the auxiliary function 
h = 72~"^^''tt'pi,...,pfe, which is modular for V^{N) by ©, ([7]), where iV = (-1)'= (mod 3), 
and we conclude as in the proof of Theorem [TJ □ 



2.2 n-systems and reality of class polynomials 

In order to compute the class polynomial H^{X), the characteristic polynomial of a 
class invariant /(r) under the action of CI{Od), we need to explicitly determine the 
conjugates of /(r) under the Galois group CI{Od)- Classically, this is done using Shimura 
reciprocity. The concept of n-systems was introduced in |Sch02] ; it encapsulates Shimura 
reciprocity and provides a simple way of expressing the conjugates as singular values of 
the same function / in basis quotients of suitably normalised quadratic ideals. 

An n-system for 01(0/)) is defined as a set of quadratic forms [Ai, Bi, Cj] = AiX'^ + 

BiX + Q = gcd{Ai,Bi,Ci) = 1 for 1 ^ i ^ /i(C'd), such that the ideals 

ai = I 2 form a system of representatives of CI{Od), and furthermore 

V ^Wz 

gcd{Ai,n) = 1 and Bi = Bi (mod 2n). 

(Here and in the following, we write Z-bases of ideals as column vectors such that the 
basis quotient of its two entries is the root of the quadratic form with positive imaginary 
part.) 

Notice that if n \ Ci, then n | Ci for all i. For any n, an initial [Ai,i?i,Ci] with 
gcd(^i, n) = 1 is easily extended to an n-system using the algorithm of |Sch02l Prop. 3]. 
It is shown in |Sch021 Th. 7] that if / G Tn is such that f o S has a rational g-expansion. 
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Ti = ^2A^ basis quotients coming from an n-system and /(ti) € Q.c, then its 
algebraic conjugates are the f{Ti). More precisely, if a is the isomorphism identifying 
CI{Od) with Gal{nc/K), then 

hiOo) 

hUx)= n {X - finr '^'^) = H {X - fin)) e K[X]. 

teciiOo) i=i 

This characterisation can also be used to identify pairs of complex conjugate roots of 
the class polynomial whenever the latter is real. We recall that Itv denotes the Fricke- 
Atkin-Lehner involution such that fl^iz) = f {—^)- 

Theorem 3 Let N and n be integers such that N \ n, let f & Tn be such that f and 
f o S have rational q- expansions, and assume that there is an ideal n 




basis quotient ti = ^2!^^ "^'^ cofactor Ci = such that Ci = 

Write To = AiTi. Then /(tq) = /(t^-^^") G Q^- 

Assume that there is a proper ideal c of Od such that /|Ar(To) = /(tq)'^^'^'* • Then 
H{)iX) e Q[X]. More precisely, if the Oj are given by an n-system [Ai,Bi,Ci\ for 
CliOo) with basis quotients Ti and ~ denotes equivalence in the class group, then fin) 
and fiTj) are complex conjugates if aiaj ~ nc""*^. In particular, fin) G M i/a^ ~ nc~^. 

This result generalises |ES041 Th. 3.4], which treats the case that /Iat = / (so that 
c = Od) and that N = n. The latter condition is used in |ES04j only to ensure that 
/(ti) G Qc, which instead we added to the hypotheses of the theorem. Once the correct 
assumptions are identified, the proof itself is very similar. 

Proof: The proof of |Sch02l Th. 7] shows that 

fin) = /(ro)'^('^") (10) 

for all i. (Here, we need the rationality of the g-expansion of f o S, which implies that 
all gi equal g = f in the notation of |Sch02| .) 

Denote by k the complex conjugation, and recall that Gal(ilc/Q) is isomorphic to 
the generalised dihedral group CliOo) x {k) with Kaia)K = (T(a~^) for a G 01(0/)). 

We first consider i = 1 and use that fiz)'^ = /(— z**) by the rationality of the q- 
expansion of /. Then 

= flNiro) = firo)"^'^ by assumption. 
Let now i and j be such that ajOj ~ nc"^. We compute 

fin)- = /(ri)'^(™")« by Cni) 

= /(ri)'^'^(""'"') = /(to)'^(""'"») = /(T,r^°^""""'^ = firj). 
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□ 



Corollary 4 Under the hypotheses of Theorems [I] or let N = Pi---pk, s 
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7 e I s and n = -N. Then there is an n-system satisfying Ci = N , 

gcd (_24,(pi-l)-{pfc-l))j ^ 

which yields the roots of the class polynomial Hj^^" "'^^. 

Moreover, the polynomial is real for even k; its complex conjugate roots may be 
identified by Theorem with c = On- 

Proof: Since none of the prime divisors of N is inert, there is an ideal of norm or, 
equivalently, a quadratic form [74i,i?i,Ci] with Ci = N. An apphcation of Theorem [3] 
using dHI) finishes the proof. □ 
For / = ttipj with odd k, the class polynomial is in general defined over K. 
As for simple ?7-quotients in |EM09l Th. 21], a particular case is easily identified in 
which the class polynomial is real: If n | Bi, which implies that N \ D and that all 
primes dividing are ramified, then —Bi = Bi (mod 2n), and for every ideal class 
represented by an element [Ai, Bi, Ci] of the n-system, the inverse class is represented 
by the element [Ai, —Bi, Ci]. Together with the rationality of the (/-expansion of /, this 
implies that Hj^ is real and that /(tj) = /(tj) if aj ~ ~ a~^. It is then enough to 
compute only '^^'^o)+ho yg^^^gg f^ji), where Hq is the number of real roots of the class 
polynomial, which is bounded above by the size of the 2-torsion subgroup of C\{Od)- 
So it is generally small, and the required number of function evaluations boils down to 
essentially 

We show in Corollary [8] that the condition n\ Bi'is in fact too restrictive: H^j^ is real 
already when only one prime dividing N is ramified in K. 

2.3 Examples 

Let D = —215 = —5 • 31, for which 2, 3, 7 and 11 split and 5 ramifies. The class number 
of C_2i5 is 14, and 0_2i5 = Z + with uj = i+V^^ . 

Using the double 77-quotient for the primes 7 and 11, the full exponent s equals 2, 
but we may use the lower exponent e = 1 by Theorem [1} 

H-lll^X) =X^'^ - 10X^3 + 42X^2 - 97X" + 144X^° - 147^^ + S9X^ + 25X^ 

- UAX^ + 113X^ - 23X^ - 28^3 + 20^^ - 5X + 1. 

The triple r^-quotient for 2, 3 and 7 has s = e = 2, and 

^-215' {X) =^^^ + (17 + ^)X^^ + (104 + moj)X^^ + (211 + 107a;)X" 

+ (-573 + 379w)X^° + (-4197 + 737a;)X^ + (-10230 + 686w)X^ 

- 13247X'^ + (-9544 - QSQuj)X^ + (-3460 - 7Z7uj)X^ 
+ (-194 - 379w)X'' + (318 - moj)X^ + (120 - lQuj)X'^ 
+ (18-a;)X + l. 
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With the ramified 5 instead of the spht 7, the polynomial becomes real, but one needs 
the higher exponent s = e = 3: 

H'llfi'iX) =X^* + 22X^3 + 175X^2 + 578X^'^ + 819X^° + 2190X^ + lOlSOX^ 

+ 17295X'^ + 10130X^ + 2190X^ + 819X^ + 578X3 j_ yj^x^ + 22X + 1. 

Examples for r/-quotients of order 4 and 5 are given by 

ltJl^'\X) =X^^ - - 8X^2 _ ^^^11 _ 7^10 _ _ ^7^8 _ 29^7 _ irx^ 
- 4X^ - 7X^ - 12X3 _ - X + 1 

and 

^W2,3,5,7,ii ^^14 _ 3^13 ^ gj^l2 ^ 35^11 ^ gQ^lO ^ ^3Qj^9 _^ jgg^8 _^ 201X'^ 
+ 188X^ + 130X^ + 80X'^ + 35X3 _^ g^2 _ 3^^ ^ 

3 Singular values for ramified primes 
3.1 Class invariants in subfields 

In this section, we show that the singular values of multiple r/-quotients lie in subfields 
of the ring class field when at least two of the involved primes are ramified. We first 
treat the case of double T/-quotients, which is slightly more involved than A; ^ 3. 

Theorem 5 Under the assumptions of Theorem\^ let pi ^ p2 he ramified in K. De- 
noting by pi the ideal of the maximal order O of K above pi and by cr(pj) the associated 
Frobenius automorphism ofVtc/K, we have 

{ e(pi-l)(p2-l) 
(-1) ^ ^/2tPiP2 
(-l)^tt,;^,p^(T) ^fp^=2 

In particular, if \D\ {piP2i^PiP2} CLnd one of the following conditions holds: 

• e is even; 

• pi and p2 are odd and one of them is congruent to 1 modulo 4; 

• pi = 2 and p2 = ±1 (mod 8); 

then rOpj p^l''") ^^^-^ subfield of index 2 ofVtc/K with Galois group C\{0 o) / {'Pi'p2) , 

and HjJ^'^"^ is the square of a polynomial in K[X] (resp. Q[X] if HjJ^'^'^ € Q[X]j. 
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Proof: We rely on Shimura's reciprocity law in the formulation of [SchlOl Th. 5.1.2]. 
Since pi and p2 divide the level of tt)p^ cannot use it directly; instead, we apply 

it twice for pi on the singular value n}p^{T). Recall from §1 that rOp^ is modular of 
level n = ^^^^^ p2 with s = gcd(24 p2-i) ' hypotheses of Theorem [T] imply that e is 
sufficiently large so that pi is coprime to the level of rof . Since = piP2 divides C and 

pi does not divide c by assumption, r is the basis quotient of the ideal = ( ^ 1 j 

and — is the basis quotient of opi = opi = 2 ■ the matrix Pi = [ ^ of 

f-l Fl ^ ^0 

determinant pi sends the former to the latter basis. By Shimura reciprocity, we have 



P2 — o Pi o S — 
ri{z) J J \pi 



The action of Pi on yjp2 is given by multiplication by ^ G {if}) and it is trivial on the 

riiP2z) 



rational q-expansion of Mp2£)_ Thus, 



A second application of cr(pi) and using pf = (pi) and = 1 yields 
The action of (y{pi) is again computed by Shimura reciprocity as 



Notice that from the hypotheses of Theorem[Tl we have gcd(pi, n) = 1. Bezout's relation 



between pi and n yields a matrix M E F with M = _i ) (mod n), so that 

Pi \ _ /^l ^ ^^^^ ^^^^ 



piy vo H 



J ^°)oM = tt,;,oM=(^ytt,^,by®. 



Plugging this into (jlip finishes the proof of the first formula of the theorem. The second 
formula is shown in the same way by exchanging the roles of pi and p2, and the third 
one follows from quadratic reciprocity. Under the additional restrictions on e, pi and p2, 
it immediately follows that tD^^ p2(r) is invariant under (T(pip2). 
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That pip2 is not principal can be shown directly without using genus theory in an 
elementary fashion: Write \D\ = piP2r with r ^ 1. Then pip2 = { ^^'"^ j if and only if 



t + u LD V •p\'P2f s piP2 + v r 

P1P2 = ^ = ^ = P1P2 1 

with t = spip2- This happens exactly for s = 0, f = 2, r = 1, \D\ = piP2', or s = 0, 
V = 1, r = A, \D\ = Apip2. So pip2 is of order 2 in the class group, and ^p^^p^ lies in the 
subfield of Vic of index 2 and of Galois group C1(C'd)/(PiP2) over K. □ 
For A; ^ 3, the values of p^_|^j^ p^(r)'^(P») and tt)p^^...,pj,(r)°"(P») are computed 

in essentially the same way as in the proof of Theorem [5l but with ^ and the Legendre 
symbols dropped. This simplifies the argument and leads to fewer restrictions on e and 
the Pi : 

Theorem 6 Under the assumptions of Theorem\^ in particular k ^ 3, let pi,. . . ,p'i^ 
for 2 ^ k' ^ k be ramified in K . Then 



ft)" 



(rYiV^) = /or 1 ^ i ^ k'. 

If k' is odd, or \D\ {pi ■ ■ •pfc/,4pi • • -pk'}, then tt)p^ ^^.(r) lies in the subfield of index 
2k'-i ofQc which has Galois group CI{Od)/ {{pipj : 2 ^ j ^ k'}) over K . In particular, 
H^^^--"" is the 2^'~^-th root of a polynomial in K[X] (resp. Q[X] i/i?^^^' -'''^ G Q[X]). 



Proof: The action of is computed as above and implies that the singular value 

is invariant under all the a{pipj) for 2 ^ j ^ k' . The classes of these ideals generate a 
subgroup of the 2-torsion subgroup of CI{Od)- By the same argument as in the proof 
of Theorem [5l a product n of several pipj is principal if and only if n = pi • • • p^/, which 
can only happen for even k' , and \D\ G {pi • • • p^/, 4pi • • • pk'}- D 

Corollary 7 Under the assumptions of Corollary^ let k' ^ 1 of the primes be ramified 
in Od- Then ft'pi,...,pj.(Ti) is a unit. For k = 2, if Pi is ramified (and pz-i poten- 

tially not), then the constant coefficient of HjJ^'^'^ is ^ • Under the assump- 



tions of Theorem \^ the constant coefficient of y HjJ'^'^^ is (^) " . For k ^ 3, 
the constant coefficient of Hj^^" "^'' is +1. Under the assumptions of Theorem\^ and 



l-^l {Pi ■ ■ 'Pk'i^Pi ■ ■ 'Pk'}; the constant coefficient of y Hjf^' is +1. 

Proof: Since and a^pi are always inequivalent in CI{Od), each conjugate tt'pi,,.,,pj.(T"i) 
occurs with its inverse (possibly up to sign if A: = 2) by Theorems [5] and [6l This shows 

to 

the unit property and the results on the constant coefficients of HjJ^'^'^ and Hj^^" "^''. 
The constant coefficient of the 2-power root has the desired property as long as pi does 
not lie in the subgroup of 01(0^) generated by pip2 resp. the pip2, . . . , pipfc', which 
holds under the additional assumptions. □ 
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3.2 n-systems and reality of class polynomials, again 



In the setting of Theorem [5l the class polynomial is the square of a polynomial with 
real coefficients, and we would like to identify the elements of an n-system leading to 
identical values, thus effectively cutting down the number of function evaluations to 
about We know by Theorem that rv^p^^p^in,) = ^p^^p^iY^'^^'^^^ ■ On the 

other hand, the proof that an n-system yields the algebraic conjugates of p2(''"«i) 
relies on the equation K)p^p^{Tij^)'^^'^^'''^^ = Ifp^ (rjj ) , where Tjj is the basis quotient of 

~ ciii(pip2)~^ ~ ciiiTi. So Oj^ and determine a double root of the class polynomial. 

Using also Theorem [3l we see that if a^j, Ojj ~ O-iin, 0^3 ~ and a^^ ~ a^^n 
correspond to four different elements of the n-system, that is, if they are pairwise in- 
equivalent, then they yield twice the same pair of complex conjugate values. If Oj^ ~ a^g, 
that is, a^^ ~ Od, then a^^ and Ojj ~ a^^'^n yield the same real value. If a^^ ~ a^^, that 
is, 0?^ ~ n, then again Oj^ yields a real value by Theorem [3l and yields the same real 
value. 

This argumentation carries over immediately to Theorem [6j For a given a^^ , the 
2^ ~^ ideals of the n-system that are equivalent to one of ai^(pip2)'^^ • • • {piPk'Y''' with 
62, • • • ,efc' G {0, 1} lead to the same value of ttip^ p^, so that the function needs to be 

evaluated essentially only times. If k is even, complex conjugate values may again 

by identified using Theorem O and the number of function evaluations drops to about 

hjOp) 
2k' ■ 

Yet another factor of 2 may be saved by exploiting the action of (j{pi). According 
to Theorems [5] and El if Oj, ~ liipi, then n,,('^2) = — - — j — v with ^ = 1 for 

k ^ 3 and = ^'^^ k = 2. This cuts down the number of function evaluations 

to about ^^^P^ , or even ^^[1:^^ when k is even and thus the class polynomial is real. 
In this optimal case, the 2'^''^^ ideals of the n-system equivalent to a^°Pi^ • • ■ p^Y with 
eo G {il} and ei, . . . ,ek' € {0, 1} lead to 2'^ ~^ times the same quadruple of two complex 
conjugate values and their (possibly negative) inverses, assuming that the ideals are 
pairwise inequivalent, which happens generically. 

Even if only one of the primes is ramified, its explicit action gives useful information. 

Corollary 8 Under the assumptions of Corollary^ let k be odd and pi ramified in Oo- 
Then the class polynomial is real, and its complex conjugate roots may be identified by 
Theorem\M with c = pi. 



Proof: Let tq = AiTi as in Theorem [3l By ([8]) and the action of o"(pi) according to 
Theorem [6] we have 

"^pi,...,PfcV'U; 

□ 
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3.3 Examples 

Consider first D = —455 = — 5-7-13. To simplify the presentation, we use in tlie following 

/ -B + y/D \ 

the notation of quadratic forms, identifying the ideal ( ^ 1 '^ith the quadratic 

form [A,B,C], where C = Let pi = [5,5,24], p2 = [7,7,18] and 3 = [2,1,57]. 

Then CI{Od) = (pi, 3) ^ Z/2Z x Z/IOZ with 3 of order 10 and p2 ~ 3^. 

The function 1x15^7 satisfies the conditions of Theorem [5] and is of level n = 35. A 
first element of a 35-system with C divisible by 35 is given by ai = [1,35,420] ~ On- 
Then Ti = —17.5 + 10.66 . . .i, and zi = tti5j(Ti) = —6.02 ... is real. Since (|) = —1, we 
have another real conjugate ^ corresponding to pi, and the same two values reoccur 

for P1P2 ~ pi3^ and pi(pip2) ~ 3^- 

The not yet covered ideal 3 is equivalent to 02 = [2, 105, 1435] in the same 35-system, 
yielding T2 = —26.25 + 5.33 . . .i and Z2 = tD5j(T2) = 0.65 ... — 2.05 . . .i. We then obtain 
twice the values Z2, Z2, ^ and corresponding to the ideals 3, pi3^, pi3, 3^, and the 
second time to pi3^, 3^, 3^, Pi3^, respectively. 

Finally, pi3^ has not occurred yet; it is equivalent to 03 = [3,175,2590] in the 35- 
system with T3 = —29.16 . . . + 3.55 . . .i and yields twice the conjugates Z3 = K)5j{t3) = 
1.50... -0.53... Z3, ^ and ^. 

Let Xi = and = ZjZj, and define gi to be the polynomial with coefficients in 

M whose roots are the conjugates related to Zj. Then gi = — (^zi — X — 1 and 

gi = X^ + 2xi - 1) (X3 -X)+ (ui + + 1 for i G {2, 3}. Multiplying 51, 52 

and (73 and rounding the resulting coefficients to integers, we obtain 

= + 3X^ - 12X^ + 32X^ - 38X^ - 17X^ + 38X^ + 32X^ + 12X^ + 3X - 1. 

Notice the constant coefficient —1 as predicted by Corollary [71 

As an example with more ramified primes, let us consider D = —3795 = -3- 5 -11 -23, 
which is divisible by 3, and all other prime factors of which are congruent to —1 modulo 3. 
Its class group is isomorphic to Z/2Z x Z/2Z x Z/4Z. If we wish to use a multiple ry- 
quotient whose level is composed of only ramified primes, then Theorems [T] and [2] imply 
that we need to add an exponent of 3. By including three of the four prime factors of 
we may then gain a factor of 4 in the degree. For instance, one computes 



H^^j^^ =X^ - 200596X^ - 511194^^ - 200596X + 1. 

Alternatively, we may add a split prime congruent to +1 modulo 3 to the level of the 
ry-quotient, which enables us to drop the exponent 3. This will generally result in a 
smaller polynomial: 

^fi^^^ = X^- 46X3 + 2115^2 - 46X + 1. 
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It should be noted that the singular values of the multiple r/-quotients do not necessarily 
generate the subfields indicated in Theorems [5] and [6l Using the split prime 13 instead 
of 19 above yields 

Y^i^^arss''" =X^ + 92^3 + 2118^2 + 92X + 1 = (X^ + 46X + 1)^; 

apparently, the prime ideals of Od above 13 and 19 act differently on the respective 
r/-quotient, although they are all of order 4 in the class group. 

4 Alternative proof for a special case and generalisation 

If we consider a more restricted situation than in the previous sections, we may give a 
proof without using explicitly Shimura's reciprocity law (which is introduced implicitly 
through the results of [Sch02j mentioned in the beginning of ^2.11 and through the n- 
systems). At the same time, we obtain a generalisation to further functions. 

Theorem 9 Let D be a quadratic discriminant of conductor c and let N be square-free, 
prime to c and such that N \ D and D has at least an additional prime factor not dividing 
N. Then there is a primitive quadratic form [Ai,Bi,Ci\ of discriminant D such that 

Ci = N and N \ Bi. Let n = \ ^ \ be the ideal of basis quotient ri associated to 

this quadratic form. Then n is of order 2 in 01(0/)). 

Let f be a modular function for r''(A^) such that f and f o S have a rational q- 
expansion, and such that /Itv = /■ Then the singular value /(ti) lies in the subfield of 

index 2 of Q.c with Galois group Cl(C'D)/(n). The class polynomial \J H-^ is real and can 

be computed from an N -system in which and ajti yield the same root, and a^"^ and 
o^^'^n yield the complex conjugate root. 

Proof: Since all primes dividing are not inert, there is a quadratic form with Ci = N . 
As N divides D and is square- free, it follows that N \ Bi and that all primes dividing 
N are ramified. The ideal n is equivalent to the ideal of norm N; the additional prime 
factor of D ensures that by genus theory, n is not principal. 

|Sch021 Th. 4], given in the beginning of ED imphes that /(n) G VL^. Let [Ai, Bi, d] 
be an A^-system, associated to the ideals Oj of basis quotients Tj. The class polynomial 
i/^ is real by Theorem[3l precisely, the ideals and a^^^n yield complex conjugate roots. 
Now, 

/(..) = = / (^) = / = /(.,), 

where Tj is a root of the quadratic form [Ci/N, —Bi, AiN] of discriminant D. From the 
A-system condition and N \ Bi we have A | Bi and —Bi = Bi (mod 2A^). Moreover, 
gcd(Cj/A, A^) = 1 since N \ Bi, N \ Ci and A^ is coprime with c. So the form is 
primitive and can be assumed to occur as an element of the A-system, associated to an 
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ideal aj ~ Ojn. Since n is not principal, Oj and aj are not equivalent and correspond to 
different elements of the A^-system. □ 
Theorem 9 covers the special case of Theorems [5] and [6] in which all prime divisors 
of N are ramified. Its interest lies in its application to other functions invariant under 
the Fricke-Atkin-Lehner involution. In particular, it was suggested in jMorOQj to use 
such functions Ap of prime level p and of (conjectured) minimal degree, as are used inside 
the Schoof-Elkies-Atkin algorithm for point counting on elliptic curves |Elk981 IMor95j . 
It was observed in [Mor09| that An yields an asymptotic gain in the logarithmic height 
of the class polynomial, compared to the polynomial for the j-invariant, by a factor of 36 
as \D\ — )• oo; families of functions with a conjectured asymptotic gain of at least a factor 
of 30 are given in [ESlOj . Using ramified primes has a double advantage: Not only is the 
degree of the class polynomial divided by 2, but also the coefficients of the polynomial 
have about half as many digits. 



5 Class field theoretic remarks 

The main algorithmic use of class polynomials is the computation of elliptic curves over 
some finite field F with a given endomorphism ring Od- If such curves exist, the class 
polynomial Hjj splits completely in F[X]; for each root /, there is an elliptic curve over 
F with complex multiplication hy Oq. To compute such a curve, one considers the 
modular polynomial ^f(f,j), the minimal polynomial of / over C(j), which is in fact 
an element of j] for all functions considered in this article. So one may reduce the 
polynomial to an element of F[/, j], specialise f as f and compute all the roots j £ F. 
For all these roots, of which there may be several, one writes down an elliptic curve 
over F with j'-invariant j and checks whether its endomorphism ring is indeed O/j as 
desired. For this application, it is clearly computationally advantageous to compute only 



If one wishes to obtain the full class field 0,c, one may use the subfield L = K[x) = 

K\X\I ^ ^ \l Hjj{X)^ (assuming the polynomial is irreducible, which need not be the 

case, see the example in ^3.3p . as a first step in a tower of field extensions. To this 
purpose, one may factor the modular polynomial ^f{x,Y) over L. It necessarily has 
an irreducible factor of degree 2^ which generates Q.c/L. In general, this polyno- 
mial factorisation step over a number field will be more costly than switching to a 
different class invariant that directly generates f^c- For a few functions of low level, 
however, the degree dj of ^ f in j is exactly 2^~^ , and no factorisation is needed for 
a discriminant for which all primes dividing N are ramified. For /c = 2, a degree 
dj = 2 is obtained if and only if [pi - l){p2 - 1) | 24 by [ESnHl Th. 9], that is, 
for{pi,p2} e {{2,3},{2,5},{2,7},{2,13},{3,5},{3,7},{3,13},{5,7}}. Conjecturally, 
for /c ^ 3 we have dj = 2^~^ if and only if [pi — 1) • • • [p^ — 1) | 24, that is, for 
{pi,---,Pk} G {{2, 3, 5}, {2, 3, 7}, {2, 3, 13}, {2, 5, 7}} . Computing the polynomials via 
the algorithm of |Eng09| shows that the condition is at least sufficient, and that the 
smallest function with k = A, 1x12,3,5,7, has dj = 16 > 2^ . A top-down approach to obtain 
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the class field as a tower of field extensions, starting with a generating element of 
is described in (HMOU IEM03j . The lucky case dj = 2^~^ can be seen as a bottom- 
up approach, in which moreover the second stage is realised by the universal modular 
polynomial independently of the concrete class field under consideration. 

It may also be possible to construct the missing part of classically using genus 

theory. Suppose that ^ \JljJ^{X) is irreducible. Let H = ({pipj : 2 ^ j ^ k'}), and 
assume that 01(0^) is the direct product of C\{Od)/H and H, which happens if and 
only if H contains no element that is a square in 01(0/5). Then Vi^ is the compositum 
of L and the genus field of K. 

For instance, consider the first example of 3331 where D = —5 • 7 • 13 and L/K \s 

generated by ^J1^^^. A quick computation with Pari/GP |Bell2j shows that L 3 \/l3, 

but L ^ \/5, so that Qc = L{V5) = L{y/^). 

However, the singular values of the multiple r/-quotients do not necessarily generate 
the Hilbert class field of a fundamental discriminant over the genus field. For D = 

— 3-5-11-23 and L/K generated by \Jl^^^^^ , one has L 3 V— 3, and L(\/5) = 

L(-v/— 23) still has index 2 in $7c. 
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